If you are using an updated openssh package and suddenly can’t connect to sites that you could before the update, you can add an option to your .ssh\/config file (create it if you don’t have one).<\/p>\n
If you see this error:<\/p>\n
Unable to negotiate with 127.0.0.1: no matching key exchange method found.
\nTheir offer: diffie-hellman-group1-sha1<\/p>\n
add this:<\/p>\n
Host somehost.example.org
\n\tKexAlgorithms +diffie-hellman-group1-sha1<\/p>\n
If you see this error:<\/p>\n
Unable to negotiate with 127.0.0.1: no matching host key type found.
\nTheir offer: ssh-dss<\/p>\n
add this instead:<\/p>\n
Host somehost.example.org
\n\tHostkeyAlgorithms ssh-dss<\/p>\n
There are command line versions of these as well. <\/p>\n
ssh -oKexAlgorithms=+diffie-hellman-group1-sha1 user@127.0.0.1 <\/p>\n
ssh -oHostKeyAlgorithms=+ssh-dss user@127.0.0.1<\/p>\n
Note: It is worth noting that these weaker cyphers were removed from the configuration for a reason. If there is another way to connect without enabling them, it might be worth considering.<\/p>\n","protected":false},"excerpt":{"rendered":"
If you are using an updated openssh package and suddenly can’t connect to sites that you could before the update, you can add an option to your .ssh\/config file (create it if you don’t have one). If you see this … Continue reading